* When a new process is created, its label must be initialized. Generally, * this involves inheritance from the parent process, modulo possible deltas. * This function allows that processing to take place. */
| 178 | * This function allows that processing to take place. |
| 179 | */ |
| 180 | void |
| 181 | mac_cred_copy(struct ucred *src, struct ucred *dest) |
| 182 | { |
| 183 | |
| 184 | MAC_POLICY_PERFORM_NOSLEEP(cred_copy_label, src->cr_label, |
| 185 | dest->cr_label); |
| 186 | } |
| 187 | |
| 188 | /* |
| 189 | * When the subject's label changes, it may require revocation of privilege |